8. Effectiveness of Cybersecurity Risk Management Measures

1.1 Glesys uses monitoring, internal and external audits to evaluate effectiveness of implemented controls Glesys has established, implemented and applies policies and procedures for assessing whether the cybersecurity risk management measures Glesys has adopted are effectively implemented and maintained, including but not limited to:

a) IMS internal audits performed using a structured audit approach, with findings reported to management and corrective actions tracked; and

b) control monitoring conducted through, inter alia, endpoint compliance checks, log review routines, backup monitoring and restore testing, and supplier performance and security follow-ups based on supplier criticality.